#3011: Allow for extendable auth_user module
------------------------------------+---------------------------------------
Reporter: nowell strite | Owner: dan
Status: assigned | Milestone:
Component: Contrib apps | Version:
Resolution: | Keywords: auth_user
Stage: Accepted | Has_patch: 1
Needs_docs: 1 | Needs_tests: 1
Needs_better_patch: 1 |
------------------------------------+---------------------------------------
Comment (by wkornewald):
Replying to [comment:48 David Danier <goliath.mailingl...@gmx.de>]:
> There are more fundamental flaws in the current approach. For example
one might need to have AnonymousUser saved in the database, which
normalized the way permission control works (permissions for the
AnonymousUser can be saved to the database).
>
> One bit problem I see with the current contrib.auth-module is, that it
combines different things. There is no need to put code for authorization
(who is accessing the page?) and authentication (is someone allowed to
access something?) into the same app. I would prefer having these things
in different applications so they could be replaced separately.
contrib.auth could provide some kind of generic API for accessing these
new applications. Having all of these different apps combined in
contrib.auth makes redesigning these thing much more complicated. Perhaps
a first step might be creating independent apps here.
I like that. Moving out the permission system would also be very useful
for an App Engine port because the current Permission model complicates
queries unnecessarily. You can as well just store a string like
"auth.can_delete" (or a whole list of such strings) which allows for much
more efficient querying on non-relational DBs. This works very well in
app-engine-patch.
--
Ticket URL: <http://code.djangoproject.com/ticket/3011#comment:49>
Django <http://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com
To unsubscribe from this group, send email to
django-updates+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---
